SQL Injection (Time-Based)

Thanks For Your Reply
ojs version 3.1.1.4

One Vulnerabilities: No Rate Limiting

User multiple time password Reset .i want User Restrict password change Limit Like 5 time 10 time etc.
Please help me

Refrence :-